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Abstract. Genus 2 curves have been an object of much mathematical 
interest since eighteenth century and continued interest to date. They 
have become an important tool in many algorithms in cryptographic 
applications, such as factoring large numbers, hyperelliptic curve cryp- 
tography, etc. Choosing genus 2 curves suitable for such applications 
is an important step of such algorithms. In existing algorithms often 
such curves are chosen using equations of moduli spaces of curves with 
decomposable Jacobians or Humbert surfaces. 

In these lectures we will cover basic properties of genus 2 curves, mod- 
uli spaces of (n,n)-decomposablc Jacobians and Humbert surfaces, mod- 
ular polynomials of genus 2, Kummer surfaces, theta-functions and the 
arithmetic on the Jacobians of genus 2, and their applications to cryp- 
tography. The lectures are intended for graduate students in algebra, 
cryptography, and related areas. 
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1. Introduction 

Genus 2 curves are an important tool in many algorithms in cryptographic ap- 
plications, such as factoring large numbers, hyperelliptic curve cryptography, etc. 
Choosing such genus 2 curves is an important step of such algorithms. 

Most of genus 2 cryptographic applications are based on the Kummer surface 
fca,b,c,d- Choosing small a, b, c, d makes the arithmetic on the Jacobian very fast. 
However, only a small fraction of all choices of a, b, c, d are secure. We aren't able 
to recognize secure choices, because we aren't able to count points on such a large 
genus-2 Jacobian. 

One of the techniques in counting such points explores genus 2 curves with 
decomposable Jacobians. All curves of genus 2 with decomposable Jacobians of a 
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fixed level lie on a Humbert surface. Humbert surfaces of level n = 3,5,7 are the 
only explicitly computed surfaces and are computed by the first author in |53j . 

In these lectures we will cover basic properties of genus 2 curves, moduli 
spaces of (n, n)-decomposable Jacobians, Humbert surfaces of discriminant n 2 , 
modular polynomials of level N for genus 2, Kummer surfaces, theta-functions, 
and the arithmetic on the Jacobians of genus 2. 

Our goal is not to discuss genus 2 cryptosystems. Instead, this paper develops 
and describes mathematical methods which are used in such systems. In the 
second section, we discuss briefly invariants of binary sextics, which determine a 
coordinate on the moduli space A^2- Furthermore, we list the groups that occur 
as automorphism groups of genus 2 curves. 

In section three, we study the description of the locus of genus two curves 
with fixed automorphism group G. Such loci are given in terms of invariants of 
binary sextics. The stratification of the moduli space A^2 is given in detail. A 
genus two curve C with automorphism group of order I 4 usually has an elliptic 
involution. An exception from this rule is only the curve with automorphism group 
the cyclic group C\o- All genus two curves with elliptic involutions have a pair 
(E, E') of degree 2 elliptic subcovers. We determine the j-invariants of such elliptic 
curves in terms of C . The space of genus 2 curves with elliptic involutions is an 
irreducible 2-dimensional sublocus £2 of A^2 which is computed explicitly in terms 
of absolute invariants i\, 12, «3 of genus 2 curves. A birational parametrization of 
£2 is discovered by the first author in [58] in terms of dihedral invariants u and v. 
Such invariants have later been used by many authors in genus 2 cryptosystems. 

In section four, we give a brief discussion of Jacobians of genus two curves. 
Such Jacobians are described in terms of the pair of polynomials [u{x),v{x)\ a 
la Mumford. In section five, we discuss the Kummer surface. In the first part of 
this section we define 16 theta functions and the 4 fundamental theta functions. 
A description of all the loci of genus two curves with fixed automorphism group 
G is given in terms of the theta functions. In detail this is first described in [S3] 
and [5T] 

In section six, we study the genus two curves with decomposable Jacobians. 
These are the curves with degree n elliptic subcovers. Their Jacobian is isogenous 
to a pair of degree n elliptic subcovers (E,E'). For n odd the space of genus 
two curves with (n, n)-split Jacobians correspond to the Humbert space of dis- 
criminant n 2 . We state the main result for the case n — 3 and give a graph- 
ical representation of the space. In each case the j-invariants of E and E' are 
determined. 

In section seven is given a brief description of the filed of moduli versus the 
field of definition problem. Such problem is fully understood for genus 2 and is 
implemented in a Maple package in section eleven. In section eight, we study 
modular polynomials of genus 2. Some of the basic definitions are given and an 
algorithm suggested for computing such polynomials. More details on these topic 
will appear in \17\ . In section nine we focus on factoring large numbers using 
genus two curves. Such algorithm is faster than the elliptic curve algorithm. It is 
based on the fact that when genus two curves with split Jacobians are used the 
computations on the Jacobian are carried to the pair (E, E') by reducing in half. 



We suggest genus two curves such that the Jacobian split in different ways. For 
example the Jacobian splits (2,2), (3,3) and (5,5). Such curves have faster time 
that genus two curves determined up to now. 

In the last section we describe a Maple package which does computation with 
genus 2 curves. Such package computes several invariants of genus two curves 
including the automorphism group, the Igusa invariants, the splitting of the Ja- 
cobian, the Kummer surface, etc. These lectures will be suitable to the graduate 
students in algebra, cryptography, and related areas who need genus two curves 
in their research. 



Notation: Throughout this paper a genus two curve means a genus two irreducible 
algebraic curve defined over an algebraically closed field k. Such curve will be 
denoted by C and its function field by K = k(C). The field of complex, rational, 
and real numbers will be denoted by C,Q, and K respectively. The Jacobian of 
C will be denoted by Jac C and the Kummer surface by JC(C) or simply Jc, JCc- 
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2. Preliminaries on genus two curves 

Throughout this paper, let k be an algebraically closed field of characteristic zero 
and C a genus 2 curve defined over k. Then C can be described as a double cover 
of P 1 (fc) ramified in 6 places w\, . . . , w§. This sets up a bijection between isomor- 
phism classes of genus 2 curves and unordered distinct 6-tuples w\, . . . , w 6 £ P 1 (fc) 
modulo automorphisms of F 1 (k). An unordered 6-tuple {w,}f =1 can be described 
by a binary sextic (i.e. a homogenous equation f(X, Z) of degree 6). 

2.1. Invariants of binary forms 

In this section we define the action of GLz(k) on binary forms and discuss the 
basic notions of their invariants. Let k[X, Z] be the polynomial ring in two vari- 
ables and let Vd denote the (d + l)-dimcnsional subspace of k[X, Z] consisting of 
homogeneous polynomials. 

f(X, Z) = a X d + ai X d - x Z + ... + a d Z d (1) 

of degree d. Elements in Vd are called binary forms of degree d. We let GL 2 (k) 
act as a group of automorphisms on k[X, Z] as follows: 



This action of GL2(k) leaves Vd invariant and acts irreducibly on Vd- Let Aq, 
A±, ... , Ad be coordinate functions on Vd- Then the coordinate ring of Vd can 
be identified with k[A , A d ]. For I £ k[A , A d ] and M € GL 2 (k), define 
I M € k[A , A d ] as follows 

7 M (/):=7(M(/)) (3) 

for all / e V d . Then I MN = (I M ) N and Eq. ^ defines an action of GL 2 {k) 
on k[Ao, Ad]. A homogeneous polynomial I € k[Ao, . . . , Ad, X, Z] is called a 
covariant of index s if 



I M (f) = 5 s I(f) 

where (5 = det (M). The homogeneous degree in Aj., ... ,A n is called the degree 
of 7, and the homogeneous degree in X, Z is called the order of I. A covariant of 
order zero is called invariant. An invariant is a 5 , L 2 (/c)-invariant on Vd- 

We will use the symbolic method of classical theory to construct covariants 
of binary forms. Let 



f(X,Z) ■.= Y d { i )a i X n - i Z i , 

(4) 

g(X,Z) :=Y J [ i )hX n - i Z i 



i=0 



be binary forms of degree n and m respectively in k[X, Z], We define the r- 
transvection 

(f,gY ■= Ck ■ J2{-l) k \u) ■ ftVr-k f)\rk ' f) Vk Jfvv-k ^ 



k=0 



where Ck = ( m ~^) ! ^~ r ) ! _ j s a homogeneous polynomial in k[X, Z] and therefore 
a covariant of order m + n — 2r and degree 2. In general, the r-transvection of 
two covariants of order m, n (resp., degree p, q) is a covariant of order m + n — 2r 
(resp., degree p + q). 

For the rest of this paper F(X, Z) denotes a binary form of order d := 2g + 2 
as below 

d d , \ 

F{X,Z) =J2 a >iX i Z d ~ i =J2\ n ) hX* 2 "'* ( 6 ) 



where bi — ^ n ~^' l ' • &i, for i = 0, . . . ,d. We denote invariants (resp., covariants) 
of binary forms by I s (resp., J s ) where the subscript s denotes the degree (resp., 
the order). 

Remark 1. It is an open problem to determine the field of invariants of binary 
form of degree d > 7. 



2. 2. Moduli space of curves 



Let M.2 denote the moduli space of genus 2 curves. To describe M.2 we need to find 
polynomial functions of the coefficients of a binary sextic f(X, Z) invariant under 
linear substitutions in X, Z of determinant one. These invariants were worked out 
by Clebsch and Bolza in the case of zero characteristic and generalized by Igusa 
for any characteristic different from 2; see [T2"] . |35) . or [SS] for a more modern 
treatment. 

Consider a binary sextic, i.e. a homogeneous polynomial f(X, Z) in k[X, Z] 
of degree 6: 

f(X, Z) = a 6 X 6 + a 5 X 5 Z + ■■■ + a Z 6 . 

Igusa J -invariants { J 2 i} of f(X, Z) are homogeneous polynomials of degree 2i 
in k[ag, ■ ■ ■ ,ae], for i = 1,2,3,5; see [35], [SS] for their definitions. Here Jio is 
simply the discriminant of f(X,Z). It vanishes if and only if the binary sextic 
has a multiple linear factor. These J2i are invariant under the natural action of 
SX 2 (fc) on sextics. Dividing such an invariant by another one of the same degree 
gives an invariant under GLi2{k) action. 

Two genus 2 curves) in the standard form Y 2 = f(X, 1) are isomorphic if 
and only if the corresponding sextics are GL 2 (k) conjugate. Thus if 7 is a GL 2 (k) 
invariant (resp., homogeneous SL2{k) invariant), then the expression 1(C) (resp., 
the condition 1(C) = 0) is well defined. Thus the GL2(k) invariants are functions 
on the moduli space M2 of genus 2 curves. This M.2 is an affine variety with 
coordinate ring 

k[M 2 ] = k[a 0) ... ) a G ,Jr 1 } GL2(k) 

which is the subring of degree elements in /c[J 2 , . . . , J 10 , J-^ 1 ]. The absolute 
invariants 

11 := 144-2 , *2 : = -1728 -3 , t 3 := 486— 5-, 

J 2 j 2 J 2 

are even GL2(fc)-invariants. Two genus 2 curves with J 2 ^ are isomorphic if 
and only if they have the same absolute invariants. If J 2 = then we can define 
new invariants as in |56j . For the rest of this paper if we say "there is a genus 2 
curve C defined over k" we will mean the fc-isomorphism class of C. 

The reason that the above invariants were defined with the J 2 in the denom- 
inator was so that their degrees (as rational functions in terms of ao, • ■ ■ , ciq) be 
as low as possible. Hence, the computations in this case are simpler. While most 
of the computational results on [53], |55j . |46) are expressed in terms of i 1,22,23 
we have started to convert all the results in terms of the new invariants 



2.3. Automorphisms of curves of genus two 

Let C be a genus 2 curve denned over an algebraically closed field k. We denote 
its automorphism group by Aut(C) = Aut(K/k) or similarly Aut(C). In any char- 
acteristic different from 2, the automorphism group Aut(C) is isomorphic to one 
of the groups given by the following lemma. 

Lemma 1. The automorphism group G of a genus 2 curve C in characteristic 
=/= 2 is isomorphic to C 2 , C\o, V4, D^, D\ 2 , C^X-Ds? GL 2 (3), or2 + S$. The case 
G = 2 + S§ occurs only in characteristic 5. //G = Z3xDg (resp., GL 2 {3)), then C 
has equation Y 2 = X 6 — 1 (resp., Y 2 = X{X 4 - I)). If G^C W , then C has 
equation Y 2 = X 6 - X . 

For the rest of this paper, we assume that char(k) = 0. 



3. Automorphism groups and the description of the corresponding loci. 

In this section we will study genus two curves which have and extra involution in 
the automorphism group. It turns out that there is only one automorphism group 
from the above lemma which does not have this property namely the cyclic group 
Cio- However, there is only one genus two curve (up to isomorphism) which has 
automorphism group Cio- Hence, such case is not very interesting to us. 

Thus, we will study genus two curves which have an extra involution, which 
is equivalent with having a degree 2 elliptic subcover; see the section on decom- 
posable Jacobians for degree n > 2 elliptic subcovers. 

3.1. Genus 2 curves with degree 2 elliptic subcovers 

An elliptic involution of K is an involution in G which is different from zo (the hy- 
perelliptic involution). Thus the elliptic involutions of G are in 1-1 correspondence 
with the elliptic subfields of K of degree 2 (by the Riemann-Hurwitz formula). 

If z\ is an elliptic involution and Zq the hyperelliptic one, then Z2 ■= zq z\ 
is another elliptic involution. So the elliptic involutions come naturally in pairs. 
This pairs also the elliptic subfields of K of degree 2. Two such subfields E\ and 
E 2 are paired if and only if E\ n k(X) = E 2 r\ k(X). E\ and E 2 are G-conjugate 
unless G = D 6 or G = Vi. 

Theorem 1. Let K be a genus 2 field and e 2 (K) the number of Aut(K)- classes 
of elliptic subfields of K of degree 2. Suppose e 2 (K) > 1. Then the classical 
invariants of K satisfy the equation, 



- jjj| + 8748Ji jfjf 507384000 J^ Jf J 2 - 192456007^ J 4 J| - 592272 Ji j|jf 
-8Uf Je - 3499200Jio J 2 Jf + 4743360Ji J 4 J 2 Je - 870912Ji jf J 2 J 6 
+1332 j|j|j 6 - 125971200000^ + 384jf J 6 + 41472Ji j| + 159jf jf 
-47952J 2 J 4 J| + 104976000Ji J| Je - 1728jf j| J 6 + 6048j| J 2 jf + 108j| J 4 jf (7) 
+12jf J\ J 6 + 29376J| jf j| - 8910J| j| j| - 2099520000J? J 4 J 6 - 236196jf J| 
+31104J| - 6912j| jf 4 + 972Jio J 2 J\ + 77436Ji J 4 J| - 78j| jf 
+3090960Jio J 4 J| J| - 5832Ji J 2 J 4 Je - 80jjj 2 - 54j| j| j| - 9331200Jio J| J| = 

Further, e 2 (K) — 2 unless K = k{X, Y) with 

Y 2 = X b - X 

in which case e 2 (K) = 1. 

Lemma 2. Suppose Z\ is an elliptic involution of K. Let z 2 = Z\Zq, where zq 
is the hyperelliptic involution. Let Ei be the fixed field of Zi for i = 1,2. Then 
K = k(X, Y) where 

Y 2 = X 6 - Sl X 4 + s 2 X 2 - 1 (8) 

and 27 — I8S1S2 — s i s 2 + + ^ s 2 7^ 0- Further E\ and E 2 are the subfields 
k{X 2 ,Y) and k{X 2 ,YX). 

We need to determine to what extent the normalization above determines 
the coordinate X. The condition Z\{X) = —X determines the coordinate X up 
to a coordinate change by some 7 € T centralizing Z\. Such 7 satisfies j(X) = 
mX or j(X) — m € k \ {0}. The additional condition abc = 1 forces 1 = 
—7(0(1) ■ • .7(05), hence m 6 = 1. So X is determined up to a coordinate change 
by the subgroup H = D 6 of L generated by rj : X — ► T 2 : —> j?, where 

^6 is a primitive 6-th root of unity. Let £3 := £f. The coordinate change by n 
replaces Si by £352 and s 2 by £§S2. The coordinate change by t 2 switches si and 
S2- Invariants of this _ff-action are: 

u := S\s 2 , v:—sl + sl (9) 

Remark 2. 5wc/i invariants were quite important in simplifying computations for 
the locus C 2 . Later they have been used by Duursma and Kiyavash to show that 
genus 2 curves with extra involutions are suitable for the vector decomposition 
problem; see J19)j for details. In this volume they are used again, see the paper 
by Cardona and Quer. They were later generalized to higher genus hyperelliptic 
curves and were called dihedral invariants; see 

The following proposition determines the group G in terms of u and v. 

Proposition 1. Let C be a genus 2 curve such that G := Aut{C) has an elliptic 
involution and J 2 7^ 0. Then, 
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Figure 1. The space C2 of genus 2 curves with extra involutions. 

a) G^Z 3 xD 4 if and only if(u,v) = (0,0) or (u,v) = (225,6750). 

b) G = Wi if and only if u = 25 and v = —250. 

c) G^D 6 if and only if 4v - u 2 + 110m - 1125 = 0, for u j= 9, 70 + 30-y/5, 25. 
Moreover, the classical invariants satisfy the equations, 

-J4J2 + 12J| J 6 - 52jf jf + 80jf + 960J 2 J 4 Je - 3600J| = 
864Ji J| + 3456000Jio Jf J2 - 43200Jio Ja J'i - 2332800000Ji - jfjf (10) 

-768 Jf Jf + 48 J|j| + 4096 J| = 

d) G^Di if and only if v 2 -4m 3 = 0, /or tt ^ 1, 9, 0, 25, 225. Cases u = 0, 225 
and n = 25 are reduced to cases a), and b) respectively. Moreover, the classical 
invariants satisfy ([7| and the following equation, 

1706J1 Jf + 2560J| + 27J4J2 - 81 jf J 6 - 14880J 2 J 4 J 6 + 28800j| = (11) 

Remark 1. The following graphs are generated by Maple 13. Notice the singular 
point in both spaces of curves with automorphism group D4 and Dq . Such points 
correspond to larger automorphism groups, namely the groups of order 24 and 48 
respectively. This can be easily seen from the group theory since D4 Z3XD4 
and D 6 <-> W\ . 

Proposition 2. The mapping 



A : (u,v) — > (ii,*2,«3) 



Figure 2. The space of genus 2 curves with automorphism group D4 and Dq respectively. 



gives a birational parametrization of £2 ■ The fibers of A of cardinality > 1 corre- 
spond to those curves C with \ Aut(C)\ > 4. 

Proof. See [55] for the details. □ 
3.1.1. Elliptic subcovers 

Let j\ and ji denote the j-invariants of the elliptic curves E\ and E2 from 
Lemma [2] The invariants j\ and j'2 are the roots of the quadratic 



, 2 o f2u 3 - 54w 2 + 9uu - v 2 + 27u) . nrrnn (u 2 + 9u-3v) 
3 + 256 (^ + 18,-4,-27) 3 + 6553 V + 18,-4,-27) 2 = ° 

(12) 



3.1.2. Isomorphic elliptic subcovers 



The elliptic curves E\ and E2 are isomorphic when equation ( 12 ) has a double 
root. The discriminant of the quadratic is zero for 

(v 2 -4u 3 ){v-9u + 27) = 

Remark 3. From lemma^ v 2 — 4u 3 if and only if Aut(C) = D4. So for C such 
that Aut{C) = D4, Ei is isomorphic to E 2 . It is easily checked that z\ and z 2 = 
zqZ\ are conjugate when G = D±. So they fix isomorphic subfields. 

If v = 9(u — 3) then the locus of these curves is given by, 
4zf - 9i\ + 73728i 2 i 3 - 150994944^ = 

(13) 

289z? - 729i 2 + 54hi 2 - i\ = 

For (u,v) = (|,-f ) the curve has Aut{C)^D A and for (u,v) = (137,1206) it 
has Aut(C) =Dq. All other curves with v = 9(u — 3) belong to the general case, 
so Aut{C) = V4,. The j-invariants of elliptic curves are j\ = fa = 256(9 — u). Thus, 
these genus 2 curves are parameterized by the j-invariant of the elliptic subcover. 



Remark 4. This embeds the moduli space M.\ into M 2 in a functorial way. 



3.2. Isogenous degree 2 elliptic subfields 

In this section we study pairs of degree 2 elliptic subfields of K which are 2 or 
3-isogenous. We denote by <$> n (x,y) the n-th modular polynomial (see Blake et 
al. [9] for the formal definitions. Two elliptic curves with j-invariants j\ and j 2 
are n-isogenous if and only if $n(ii>.?2) = 0. In the next section we will see how 
such modular polynomials can be generalized for higher genus. 

3.2.1. 3-Isogeny. 



Suppose E\ and E% are 3-isogenous. Then, from equation (12 1 and $3(^1,^2) = 
we eliminate ji and j 2 . Then, 

(4v -u 2 + llOu - 1125) ■ 51O, v) ■ g 2 (u, v) = (14) 

where g\ and g 2 are given in [58] . 

Thus, there is a isogeny of degree 3 between E\ and E 2 if and only if u and 



v satisfy equation (14 1. The vanishing of the first factor is equivalent to G = Dq 



So, if Aut(C) = Dq then E\ and E 2 are isogenous of degree 3. 

3.2.2. 2-Isogeny 

Below we give the modular 2-polynomial. 
$2 = x 3 - x 2 y 2 + y 3 + U88xy{x + y) + 40773375a;j/ - 162000(a; 2 - y 2 ) + 

(15) 

8748000000(x + y) - 157464000000000 
Suppose Ei and E 2 are isogenous of degree 2. Substituting j\ and j 2 in $2 we get 

fi(u,v)-f 2 (u,v) = (16) 
where fi and f 2 are displayed in [57] 

3.2.3. Other isogenics between elliptic subcovers 

If Aut(C) =i?4, then Z\ and z 2 are in the same conjugacy class. There are again 
two conjugacy classes of elliptic involutions in Aut{C). Thus, there are two degree 
2 elliptic subfields (up to isomorphism) of K . One of them is determined by double 



root j of the equation (12), for v 2 — 4u 3 — 0. Next, we determine the j-invariant 



f of the other degree 2 elliptic subfield and see how it is related to j. 

C 



Ifv 2 -4u 3 = Othen Aut(C) V4 and P = {±1, ±s/a, ±Vb}. Then, si = a+i + 1 = 
S2- Involutions of C are ri : X — > —X, T2 : X — >• A, T3 : X — > — A. Since ri and 
T3 fix no points of P then they lift to involutions in Aut(C). They each determine 
a pair of isomorphic elliptic subfields. The j-invariant of elliptic subfield fixed by 



n is the double root of equation (12 1, namely 



-256- 



To find the j-invariant of the elliptic subfields fixed by T3 we look at the degree 2 
covering <j> : P 1 -> P 1 , such that (f)(±l) = 0, 0(a) = </>(-£) = 1, <K~a) = <K~) = 
-1, and 0(0) = 0(oo) = 00. This covering is, <f>(X) = j^^r 1 ■ The branch 
points of (j) are — ± ^=== . From lemma Jij the elliptic subfields E[ and E' 2 have 
2-torsion points {0, 1, — 1, q{\. The j-invariants of E[ and are 

f = -m {v - 15)3 
7 (« + i) 2 

Then $>2(j,j') — 0, so i?i and £^ are isogenous of degree 2. Thus, T\ and r 3 
determine degree 2 elliptic subfields which are 2-isogenous. 



4. Jacobians of a genus two curves 

5. The Kummer surface 

The Kummer surface is an algebraic variety which is quite useful in studying 
genus two curves. Using the Kummer surface we can take the Jacobian as a double 
cover of the Kummer surface. Both the Kummer surface and the Jacobian, as 
noted above, can be given in terms of the theta functions and thcta-nulls. 

5.1. Half Integer Theta Characteristics 

For genus two curve, we have six odd theta characteristics and ten even theta 
characteristics. The following are the sixteen theta characteristics where the first 
ten are even and the last six are odd. For simplicity, we denote them by &i(z) 



instead of 64 



a 
b 

for the odd functions 



(z, t) where i = 1, . . . , 10 for the even functions and i = 11, . . . , 16 



9i(z 

d 5 (z 
6 7 (z 
d 9 (z 
hi(z 
h 3 (z 
hs(z 
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M*) = ^10 
012(2) = 12 
M (*O = 014 
016(2) = 016 
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(z,r) 
(z,r) 

(z,t) 
(z,r) 
(z,r) 



Remark 2. All the possible half-integer characteristics except the zero character- 
istic can be obtained as the sum of not more than 2 characteristics chosen from 
the following 5 characteristics: 





1 l 

2 2. 



|0 







2 2 



of 
o| 



The sum of all 5 characteristics in the set determines the zero characteristic, where 
•&i{z) are defined as 



00 
00 

0| 




{z,2Q), d 2 {z)=9 
(z,2Q), d A {z) = 9 



1 1' 

2 2 



|0 




(z,2Q) 



see Shaska, Wijesiri [59] for details. 
5.2. Inverting the Moduli Map 

Let Aj, i = 1, . . . , n, be branch points of the genus g smooth curve C. Then the 
moduli map is a map from the configuration space A of ordered n distinct points 
on P 1 to the Siegel upper half space H 2 . In this section, we determine the branch 
points of genus 2 curves as functions of theta characteristics. The following lemma 
describes these relations using Thomae's formula. The identities are known as 
Picard's formulas. 



Lemma 3 (Picard). Let a genus 2 curve be given by 



Y 2 = X(X - 1)(X - X)(X - fi)(X - v). 



(17) 



Then, A, /j,, v can be written as follows: 



X = 




M = 




v = 




(18) 



5.3. Rummer surface 

The Kummer surface is a variety obtained by grouping together two opposite 
points of the Jacobian of a genus 2 curve. More precisely, there is a map 



such that each point of JC has two preimages which are opposite elements of 
Jac C. There are 16 exceptions that correspond to the 16 two-torsion points. 
The Kummer surface does not naturally come with a group structure. However 
the group law on the Jacobian endows a pseudo-group structure on the Kummer 
surface that is sufficient to define scalar multiplication. 

Definition 1. Let fi be a matrix in H2. The Kummer surface associate to is the 
locus of the images by the map <p from C 2 to P 3 (C) defined by: 



Note that the Siegel upper half-space H 2 is the set of symmetric 2x2 complex 
matrices with positive imaginary part which is defined as 



It can be proven that this map is well defined in the sense that the four 9i can 
not vanish simultaneously. The Theta functions verify the following periodicity 
condition: for all z e C 2 , \fb e {0, |} 2 , and V(m,n) G Z 2 x Z 2 , we have 

0[O, b](z + Vtm + n) = exp(-2ir t ibm - m t mQ.m - 2iTT t mz) ■ 9[0, b](z) 

Therefore, two vectors that differ by an element of the lattice Z 2 + f2Z 2 are 
mapped to the same point by (p. This map can be seen as a map from the Abelian 
variety C 2 /(Z 2 + 51Z 2 ). An additional result is that the Kummer surface of ft is a 
projective variety of dimension 2 that we will denote by /C(fi) or simply K. The 
group law on the Jacobian does not carry to a group law on fC. Indeed, since all 
6i are even, tp is even and maps two opposite element to the same point P. 

We shall consider a Kummer surface JC = JC a ,b,c,d parameterized by Theta 
constants: 



* : Jac (C) -> JC(C) 



i P :z^(e 1 (2z),9 2 (2z),6 3 {2z), 6 4 (2z)) 



H 2 = {F e Mat (2, C) | F = F T 



and 



Im > 0} 



a = 0i(O), b = 9 2 (0) 



c = 3 (O), d = 4 (O) 



and 

A = 0i(O), B = tf 2 (0) 
C = tf 3 (0), £) = i?4(0) 

Their squares are linked by simple linear relations that are obtained by 
putting z = in the equations above. 

AA 2 =a 2 + b 2 +c 2 + d 2 
AB 2 = a 2 + b 2 -c 2 -d 2 
AC 2 = a 2 -b 2 +c 2 -d 2 
AD 2 = a 2 -b 2 -c 2 + d 2 

We write (x, y, z, t) the projective coordinate of points on JC, that is: 

x = X6 1 (z),y = \6 2 {z),z = X9 3 (z),t = X9 4 (z) 

for some z € C 2 , and some A e C*. 

Then, the Kummer surface is given by the equation: 

(x 4 + y 4 + z 4 +t 4 )+2Exyzt-F(x 2 t 2 +y 2 z 2 )-G(x 2 z 2 +y 2 t 2 )-H(x 2 y 2 + z 2 t 2 ) = 

(19) 

where 

E = abed 



F = 



(a 2 d 2 - b 2 c 2 )(a 2 c 2 - b 2 d 2 ){a 2 b 2 - c 2 d 2 ) 
(a 4 - b 4 + d 4 ) 



(a 2 d 2 - b 2 c 2 ) 



(a 4 -b 4 + c 4 - d 4 ) 
1 ~ " (a 2 c 2 -b 2 d 2 ) 

(a 4 + b 4 -c 4 - d 4 ) 
(a 2 b 2 -c 2 d 2 ) 

We have the following lemma. 

Lemma 4. Every genus two curve can be written in the form: 

2fl2\ / /J2 /j2 i /j2 fl2 fl2/)2 

1^3 \ f„,2 VlVz+VlVi „_ , y i y 3 2 



w/iere a = s#- can 6e given in terms of 9i, 82,63, and 9 4 , 

a 2 + °i + ° 2 - 3- °i a + 1 = 
n?n2 fl2/i2 u - 

Furthermore, if a = ±1 t/ien V4 Aui(C). 



Remark 3. i) From the above we have that 6*| = 9f implies that V4 Aut(C). 
Lemma [5] determines a necessary and equivalent statement when V4 =-> Aut(C). 

ii) The last part of Lemma [4] shows that if 9% = 9f , then all coefficients of 
the genus 2 curve are given as rational functions of the four fundamental theta 
functions. Such fundamental theta functions determine the field of moduli of the 
given curve. Hence, the curve is defined over its field of moduli; see section 7 for 
details. 

Corollary 1. Let C be a genus 2 curve which has an elliptic involution. Then C is 
defined over its field of moduli. 

5.4- Curves with automorphisms 

Since most of the computations on the Jacobians of genus two curves are per- 
formed using theta functions, and we are especially interested on genus two curves 
with split Jacobians it becomes desirable to describe the conditions that a genus 
two curve has extra automorphisms in terms of the theta functions. In other 
words to describe the loci with fixed automorphism group in terms of the theta 
functions. The following was the main result of [59] . 

5.4.I. Describing the Locus of Genus Two Curves with Fixed Automorphism 
Group by Theta Constants 

The following lemma is proved in |59j 

Lemma 5. Let C be a genus 2 curve. Then Aut(C) = V4 if and only if the theta 
functions of C satisfy 

(tfi f)4\/ a 4 /)4w/)4 ni \{ /)2/)2/i2/)2 n2n2n2n2 \nin2n2 j_n2n4,n2 \ 
\"1 - t >2)( t >3 ~ f >4)\"8 ~ t, 10)(- t, l y 3 t 's y 2 ~ t, l y 2 y 4 6 'l0 + ^I^IO + t, 3 y 2 y loi 

(n2n2n2n2 (\2nAn2 i n2n2n2n2 /)4/j2/i2 \( /)4/i2/j2 i n2n2n2 n2 

(v 3 u s v 2 ti 4 - v 2 v 4 t> 10 + 1 e/ 3 4 lo - v 3 v 2 v 10 )(-y 8 u 3 y 2 + f g y 2 y 1() y 4 

n2n2n2n2 /)2/i2/j4 w /j2/i4/)2 /)2/j4 n2 . n2n2n2 n2 i ri2 n2 n2 n2 \ 

+v 1 u s v 8 ti w - t> 3 v 2 u 10 )(-u 1 v 8 ti 4 - y 1 v 10 u 4 + w 8 y 2 y 10 & 4 + u^iO^w) 



(20) 



/ /)2/}2n2/)2 1 n2 n2 /i4 i /j2n4/)2 n2n2n2 n2\( n2 n2 n2 n2 . /)4/i2 n2 

(-y 1 u s ti [i ti 4 + t) 1 u 10 u 4 + y 1 y 3 y 10 - v 3 y 2 tt 10 u 4 )(-y 1 v 8 tt 2 t> 4 + v 1 v w v 4 

n2n2n2n2 , /)4/i2/j2 w /j4/i2/)2 i n2n2n2 n2 n2 ni n2 , n2n2n2n2 \ 
-V 1 V 3 V 2 ti w + t> 2 V 4 U 10 )(-V 8 t) 2 tl 4 + y l y 8 y lO y 4 - y 2 6, l() y 4 + y 3 y 8 fc '2 y l0) 

//)4/i2/j2 n2n2n2n2 n2n2n2n2 , n2 ni n2 \ { n2 n2 n2n2n2n2 

(o 1 v s v 4 - y\ti 2 y 4 y X Q - 1 v 3 t> s t) 2 + v 8 t> 2 v 4 )(v 1 y 3 v 8 - v 4 v 8 v 2 v 4 

n2n2n2n2 , n2 n2 n4 \ / n2 n4 n2 n2 n2 n2 n2 , /)2/i2/}4 n2n2n2n2 \ 
~t> 1 tl :i tl 2 y 10 + V 3 U 8 t> 2 )(U 1 V 8 ti [i - yifgfio^ + ^l^lO _ y 3 fc, 8 y 2 t 'l0i 

//i2/i2/)4 /)2/i2/i2/)2 . /)2/i4/j2 n2n2n2n2\ r\ 

(o 1 y 8 y 4 - v 1 v 3 v 4 ti 10 + ViV 3 v 8 - a 3 y 8 y 2 y 4 ) — u. 

Our goal is to express each of the above loci in terms of the theta character- 
istics. We obtain the following result. 

Theorem 2. Let C be a genus 2 curve. Then the following hold: 

i) Aut(C) = V4 if and only if the relations of theta functions given in Eq. ( 20 1 
holds. 

ii) Aut(C) = Dg if and only if the Eq. I in \59$ is satisfied 
Hi) 



Hi) Aut(C) =D\2 if and only if the Eq. II and Eq. Ill in i59jj are satisfied. 
Remark 4. For e detailed account of the above see [SH] or [?]. 



5.5. Mapping a point of K a ,b,c,d into the Jacobian of C 



Once we have an equation for the curve C associated to JC a ,b,c,d, a natural question 
is to give an explicit function that maps the points of the Kummer surface to a 
class of divisors in the Jacobian of C, for instance in their Mumford representation. 

Let JC a fi,c,d be a Kummer surface, and we assume that we have computed all 
the squares of Theta constants (under the condition that each of them will be 
non zero). Let P = (x, y, z, t) be a point on tC a ,b,c,d- Then we can compute 9i(z) 2 
for i e [5,16], corresponding to (x,y,z,t) = (0i(z))»=i,2,3,4- 

Then, let us define 

We have noted &i instead of 6*^(0) for i = 1, 2, 3 , 16.. 

Since the Jacobian is of degree 2 of the Kummer surface, one should be able 
to decide which pair of opposite divisors is the real image of the point P, because 
for a given u-polynomial, there are up to four O-polynomials that yield a valid 
Mumford representation of a divisor in the Jacobian. These four O-polynomials 
are grouped into two pairs of opposite divisors. Generically, giving the square of 
the constant term of v(x) = V\X + v is enough to decide. Here is the formula for 
v 2 in terms of Theta functions: 

+26lelel{el{z)el{z) + el{z)el{z) - 2e 1 e2e [) e 4 6 1 (z)e 2 (z)e [i (z)9 4 (z){e 2 1 9l + elel)) 

Finally a formula for v\ in terms of vq,u and u\ can be deduced from the 
fact that u{x) should divide v(x) 2 — f(x). If no theta constant vanishes, the map 
is undefined in the case where Q\§{z) is zero. This corresponds to the case where 
the image of the map is a divisor for which the u-polynomial in the Mumford 
representation is of degree less than 2 (i.e is a linear function). Then, the formula 
in terms of theta functions is given by: 

\elel(z) 
{\-i)eieUz)-\eieUzy 

Then, the Mumford representation of a divisor D in the Jacobian is given (x + 
«o,±v / /(- u o))- 



6. Decomposable Jacobians 

Let C be a genus 2 curve defined over an algebraically closed field k, of charac- 
teristic zero. Let tp : C — > E be a degree n maximal covering (i.e. does not factor 
through an isogeny) to an elliptic curve E defined over k. We say that C has a 
degree n elliptic subcover. Degree n elliptic subcovers occur in pairs. Let (E 7 E r ) 
be such a pair. It is well known that there is an isogeny of degree n 2 between 



the Jacobian Jc of C and the product E x E' . We say that C has (n,n)-split 
Jacobian. 

Curves of genus 2 with elliptic subcovers go back to Legendre and Jacobi. 
Legendre, in his Theorie des fonctions elliptiques, gave the first example of a 
genus 2 curve with degree 2 elliptic subcovers. In a review of Legendre's work, 
Jacobi (1832) gives a complete description for n = 2. The case n = 3 was studied 
during the 19th century from Hermite, Goursat, Burkhardt, Brioschi, and Bolza. 
For a history and background of the 19th century work see Krazer [IT] pg. 479] . 
Cases when n > 3 are more difficult to handle. Recently Shaska dealt with cases 
n = 5, 7 in [46] . 

The locus of C, denoted by C n , is an algebraic subvariety of the moduli 
space M.2- The space £ 2 was studied in Shaska/Volklein [58]. The space £„ for 
n = 3, 5 was studied by Shaska in J>5 46| were an algebraic description was given 
as sublocus of M.2- 

6.1. Curves of genus 2 with split Jacobians 

Let C and E be curves of genus 2 and 1, respectively. Both are smooth, projective 
curves defined over k, char(k) = 0. Let ip : C — > E be a covering of degree 
n. From the Riemann-Hurwitz formula, X^Pec (^ > ) — 1) = 2 where e^,(P) 
is the ramification index of points P € C, under ip. Thus, we have two points 
of ramification index 2 or one point of ramification index 3. The two points of 
ramification index 2 can be in the same fiber or in different fibers. Therefore, we 
have the following cases of the covering ip: 

Case I: There are P x , P 2 € C, such that e^(Pi) = e v ,(P 2 ) = 2, ^>(Pi) ^ ^(^2), 
and VP eC \ {Pi, P 2 }, e^(P) = 1. 

Case II: There are Pi, P 2 € C, such that e^(Pi) = e^(P 2 ) = 2, ^(Pl) = 
i>(P 2 ), and VP e C \ {Pi, P 2 }, e^P) = 1. 

Case III: There is P 1 e C such that e v ,(Pi) = 3, and VP G C \ {Pi}, 
MP) = 1. 

In case I (resp. II, III) the cover ip has 2 (resp. 1) branch points in E. 

Denote the hyperelliptic involution of C by w. We choose O in E such that w 
restricted to E is the hyperelliptic involution on E. We denote the restriction of 
w on E by v, v(P) = —P. Thus, ipow — voip. E[2] denotes the group of 2-torsion 
points of the elliptic curve E, which are the points fixed by v. The proof of the 
following two lemmas is straightforward and will be omitted. 

Lemma 6. a) If Q e E, thenVP G w(P) e ^(-Q). 

b) For all P eC, e^(P) = (w(P)). 

Let W be the set of points in C fixed by w. Every curve of genus 2 is given, up 
to isomorphism, by a binary sextic, so there are 6 points fixed by the hyperelliptic 
involution w, namely the Weierstrass points of C. The following lemma determines 
the distribution of the Weierstrass points in fibers of 2-torsion points. 



Lemma 7. The following hold: 



1. ip{W) C E{2] 

2. If n is an odd number then 

i) ijj(W) = E[2] 

ii) IfQe E[2] then #{ijj- l {Q) H W) = 1 mod (2) 

3. If n is an even number then for all Q £ E[2], #(tp~ 1 (Q)nW) — mod (2) 

Let ttq ■ C — > P 1 and 7Tb : E — > P 1 be the natural degree 2 projections. 
The hyperelliptic involution permutes the points in the fibers of ttq and tte- 
The ramified points of nc, 7r_e are respectively points in W and E[2] and their 
ramification index is 2. There is <f> : P 1 — > P 1 such that the diagram commutes. 

C ^ P 1 

41 10 (21) 
E ^ P 1 

Next, we will determine the ramification of induced coverings (f> : P 1 — > P 1 . First 
we fix some notation. For a given branch point we will denote the ramification 
of points in its fiber as follows. Any point P of ramification index m is denoted 
by (to). If there are k such points then we write (m) k . We omit writing sym- 
bols for unramified points, in other words (l) fc will not be written. Ramification 
data between two branch points will be separated by commas. We denote by 
n E (E[2]) = {qi, . . . ,q 4 } and n c (W) = {wi, . . .,w 6 }. 

6.2. Maximal coverings tp : C — > E. 

Let tpi : C — > Ei be a covering of degree n from a curve of genus 2 to an elliptic 
curve. The covering tpi : C — > E\ is called a maximal covering if it does not 
factor through a nontrivial isogeny. A map of algebraic curves / : X — > Y induces 
maps between their Jacobians /* : Jy —> Jx and /* : Jx —> Jy- When / is 
maximal then /* is injective and fcer(/*) is connected, see |53j for details. 

Let ipi : C — > Ei be a covering as above which is maximal. Then : 
Ei — > Jc is injective and the kernel of ^i,* : Jc — > Ei is an elliptic curve which 
we denote by E^. For a fixed Weierstrass point P £ C, we can embed C to its 
Jacobian via 

i P : C — > J c 

x -> [(x) - (P) 

Let g : E^ — > Jc be the natural embedding of E% in Jc, then there exists : 
Jc E2- Define tp2 = 9* ° ip ■ C — >• E2. So we have the following exact sequence 

-> E 2 J c ^4 Ei -> 
The dual sequence is also exact 

-> Ei J c E 2 



(22) 



If deg{tpi) is an odd number then the maximal covering *p 2 : C — > E 2 is unique. 
If the cover ipi : C — > E\ is given, and therefore <f>\, we want to determine "02 : 
C — > E 2 and <p2- The study of the relation between the ramification structures 
of <f>i and <j>2 provides information in this direction. The following lemma (see 
answers this question for the set of Weierstrass points W = {Pi, . . . , P 6 } of C 
when the degree of the cover is odd. 

Lemma 8. Let tpi : C — > E\, be maximal of degree n. Then, the map ip2 ■ C — > E 2 
is a maximal covering of degree n. Moreover, 

i) if n is odd and Ot € -E»[2], i = 1,2 are the places such that f^{ip~ l {Oi) fl 
W) = 3, then n W and ip 2 ~ 1 (C>2) n W form a disjoint union of 
W. 

ii) if n is even and Q E E[2], then # (V> _1 (Q)) = or 2. 

The above lemma says that if ip is maximal of even degree then the corre- 
sponding induced covering can have only type I ramification. 

6.3. The locus of genus two curves with (n,n) split Jacobians 

Two covers / : X — > P 1 and /' : X' — > P 1 are called weakly equivalent if there 
is a homeomorphism h : X — > X' and an analytic automorphism g of P 1 (i.e., a 
Moebius transformation) such that g o f = f o h. The covers / and /' are called 
equivalent if the above holds with g = 1. 

Consider a cover / : X — >• P 1 of degree n, with branch points p\,...,p r e P 1 . 
Pick p G P 1 \ {pi, ...,p r }, and choose loops 7$ around pi such that 71, ...,7 r is a 
standard generating system of the fundamental group T := 7Ti(P 1 \{pi, ...,p r },p), 
in particular, we have 71 • • • 7 r = 1. Such a system 71, j r is called a homotopy 
basis of P 1 \ {pi, ...,p r }. The group T acts on the fiber / _1 (p) by path lifting, 
inducing a transitive subgroup G of the symmetric group S n (determined by / 
up to conjugacy in S n ). It is called the monodromy group of /. The images of 
7i,...,7 r in S n form a tuple of permutations a = (<7i, a r ) called a tuple of 
branch cycles of /. 

We say a cover / : X — > P 1 of degree n is of type o if it has a as tuple of 
branch cycles relative to some homotopy basis of P 1 minus the branch points of 
/. Let H a be the set of weak equivalence classes of covers of type a. The Hurwitz 
space Ha carries a natural structure of an quasiprojective variety. 

We have % a = H T if and only if the tuples a, r are in the same braid orbit 
O r = O a . In the case of the covers <j> : P 1 — > P 1 from above, the corresponding 
braid orbit consists of all tuples in S n whose cycle type matches the ramification 
structure of <f>. 

6.3.1. Humbert surfaces 

Let A 2 denote the moduli space of principally polarized Abelian surfaces. It is 
well known that A 2 is the quotient of the Siegel upper half space H 2 of symmetric 
complex 2x2 matrices with positive definite imaginary part by the action of the 
symplectic group Sp4(Z); see [?, p. 211]. 

Let A be a fixed positive integer and be the set of matrices 



Z 2 Z 3 



g£ 



2 



such that there exist nonzero integers a, b, c, d, e with the following properties: 
azi + bz 2 + cz 3 + d{z\ — Z\Z$) + e = 

(23) 

A = b 2 - Aac - Ade 

The Humbert surface Ha of discriminant A is called the image of under 
the canonical map 

H 2 ^A 2 := S Pi {Z)\H 2 , 
see [341101 ?] for details. It is known that Ha 7^ if and only if A > and A = 



or 1 mod 4. Humbert (1900) studied the zero loci in Eq. (23) and discovered 
certain relations between points in these spaces and certain plane configurations 
of six lines; see [33] for more details. 

For a genus 2 curve C defined over C, [C] belongs to C n if and only if the 
isomorphism class [Jc] G A2 of its (principally polarized) Jacobian Jc belongs 
to the Humbert surface H„2 , viewed as a subset of the moduli space A 2 of prin- 
cipally polarized Abelian surfaces; see [?, Theorem 1, p. 125] for the proof of this 
statement. In [?] is shown that there is a one to one correspondence between the 
points in C n and points in H„2. Thus, we have the map: 

H(j y JZ n )■ H n 2 

(24) 

([/],(pi,....Pr)">[C]->[Jc] 



In particular, every point in H„2 can be represented by an element of f) 2 of the 
form 




Zi, Z 2 G ft. 



There have been many attempts to explicitly describe these Humbert surfaces. 
For some small discriminant this has been done in [S5], [5S], [3S]. Geometric 
characterizations of such spaces for A = 4, 8, 9, and 12 were given by Humbert 
(1900) in [3J] and for A = 13, 16, 17, 20, 21 by Birkenhake/Wilhelm. 

6.4. Genus 2 curves with degree 3 elliptic subcovers 

This case was studied in detail in[55j. The main theorem was: 

Theorem 3. Let K be a genus 2 field and e 3 (K) the number of Aut(K/k) -classes 
of elliptic subfields of K of degree 3. Then; 
1) e 3 (K) =0,1,2, or A 

ii) e. 3 (K) > 1 if and only if the classical invariants of K satisfy the irreducible 
equation F(J 2 , J 4 , J 6 , J 10 ) = displayed in ]55\ Appendix A]. 



There are exactly two genus 2 curves (up to isomorphism) with e^{K) = 4. 
The case e^(K) = 1 (resp., 2) occurs for a 1-dimensional (resp., 2-dimensional) 
family of genus 2 curves, see [55] , 




Figure 3. Shaska's surface as graphed in [4] 

A geometrical interpretation of the Shaska's surface (the space £3) and its 
singular locus can be found in 0]. 

Lemma 9. Let K be a genus 2 field and E an elliptic subfield of degree 3. 

i) Then K = k(X, Y) such that 

Y 2 = (4X 3 + b 2 X 2 + 2bX + l)(X 3 + aX 2 + bX + 1) (25) 
for a,b € k such that 

(4a 3 + 27 - 18ab - a 2 b 2 + 4b 3 ){b 3 - 27) ^ (26) 

The roots of the first (resp. second) cubic correspond to W^(K,E), (resp. 
W^(K,E)) in the coordinates X,Y, (see theoremuy. 

ii) E = k(U, V) where 

X 2 

U = Jf 3 + aX 2 + bX + l 



and 



(27) 



where R = 4a 3 + 27 - 18a6 - a 2 b 2 + 46 3 ^ 0. 
Hi) Define 

u := ab, v := b 3 

Let K 1 be a genus 2 field and E' C K' a degree 3 elliptic sub field. Let a',b' be 
the associated parameters as above and v! := a'b' , v = (b 1 ) 3 . Then, there is a 
k-isomorphism K — > K' mapping E — > E' if and only if exists a third root of 
unity £ G k with a' — £a and b' = £ 2 b. 7/6^0 then such £ exists if and only if 
v = v' and u = v! . 

iv) The classical invariants of K satisfy equation [55, Appendix A]. 

Let 



F{X) 
G(X) 



X a + aX 2 + bX + 1 
4X 3 + b 2 X 2 + 2bX + 1 



(28) 



Denote by R = 4a 3 + 27 - I8ab - a 2 b 2 + 4& 3 the resultant of F and G. Then 
we have the following lemma. 



Lemma 10. Let a,b G k satisfy equation ( 26 ) . Then equation ( 25 I defines a genus 



2 field K — k(X, Y). It has elliptic subfields of degree 3, Ei — k(Ui, Vi), i = 1,2, 
where Ui, and Vi are as follows: 



Ui = 



X 2 



F(xy 



Vi =Y 



X 3 - bX - 2 



F{X) 2 



U 2 = 4 



r (x -sf(x-t) 

G(X) 
(3X - a) 



3(4X 3 + 1) 

(bX + 3) 2 
b 2 G(X) 



if b(b 3 - Aba + 9) / 
if b = 

if (b 3 - 4ba + 9) = 



(29) 



whe 



3 _ 3a -b 2 
" ' ^b' ~ b 3 -4ab + 9 



' \/27 — b 3 Y 

— —r^- ((4o6 - 8 - 6 3 )X 3 - O 2 - 4a6)X 2 + bX + 1) i/ 6(6 3 - 46a + 9) ^ 

8X 3 - 4aX 2 - 1 

V 2 = { Y — — if 6 = 

(AX 3 + 1) 2 J 

-Vb^—(bX 3 + 9X 2 + 6 2 X + b) if (6 3 - 46a + 9)=0 
b G(X) y ; 

(30) 

6.5. Elliptic subcovers 



We express the j-invariants ji of the elliptic subfields Ei of X, from Lemma 10 
in terms of u and v as follows: 

, „ (vu 2 + 216u 2 - I2&vu - 972m + 12u 2 + 405v) 3 
J (v - 27) 3 Uv 2 + 27v + 4tt 3 - 18vu - vu 2 ) 2 

(31) 

. = _ 256 (u 2 -3vf 

n v(4v 2 + 27v + 4u 3 - lSvu - vu 2 ) 

where v ^ 0, 27. 

Remark 5. The automorphism v £ Galf,/ u>v \/y ritr2 \ permutes the elliptic sub- 
fields. One can easily check that: 

Kji) = h, "(h) = h 

Lemma 11. The j-invariants of the elliptic subfields satisfy the following quadratic 
equations over k{r\, r 2 ); 

f-Tj + N = 0, (32) 

where T, N are given in J55jj. 

6.5.1. Isomorphic Elliptic Subfields 

Suppose that E\=E 2 . Then, j\ = ji implies that 

8v a + 27v 2 - 54uv 2 - itV + 10Su 2 v + 4uv - W8u 3 = (33) 

or 

324v 4 u 2 - 5832t> 4 u + 37908u 4 - 314928t> 3 u - 81v 3 u 4 + 255879i; 3 + 30618t> 3 u 2 
- 864i; 3 « 3 - 6377292m; 2 + 8503056t) 2 - 324u 5 v 2 + 2125764u : V - 215784m 3 ?) 2 (34) 
+ U580u 4 v 2 + 16u 6 v 2 + 78732« 3 ?j + 8748m 5 u - 86Au 6 v - 157464« 4 u + 11664u 6 = 

The former equation is the condition that det(Jac(8)) = 0. The expressions 
of i\, i2, «3 we can express u as a rational function in i±, i 2 , and v. This is displayed 
in [551 Appendix B]. Also, [k(v) : fc(ii)] = 8 and [k(v) : k(i 2 )] = 12. Eliminating 
v we get a curve in i\ and i 2 which has degree 8 and 12 respectively. Thus, 
k(u,v) = fc(ii,i2). Hence, e^,{K) = 1 for any K such that the associated u and v 
satisfy the equation; see [55J for details. 



6.5.2. The Degenerate Case 



We assume now that one of the extensions K/Ei from Lemma 10 is degenerate, 
i.e. has only one branch point. The following lemma determines a relation between 
ji and j 2 - 

Lemma 12. Suppose that K/E2 has only one branch point. Then, 

729jij 2 - (32 - 432) 3 = 

For details of the proof see Shaska [55] ■ Making the substitution T — — 27 ji 
we get 

. (r+16) 3 
Ji = F 2 (T) = 

where F2(T) is the Fricke polynomial of level 2. 
If both K/Ei and Kj E2 are degenerate then 

f 729JU2 - (h - 432) 3 = 

i (35) 
{ 729JU2 - (32 - 432) 3 = 

There are 7 solutions to the above system. Three of which give isomorphic elliptic 
curves 

h = 32 = 1728, 31 = 32 = ^(297 ± 81^15) 
The other 4 solutions are given by: 

f 729JU2 - (7i - 432) 3 = 

{ (36) 

[ ji + ji - 1296(j'i + J 2 ) + + 559872 = 



6.6. Further remarks 



If 63(C) > 1 then the automorphism group of C is one of the following: Z 2 , V4, 
D 4 , or D 6 . Moreover; there are exactly 6 curves C € £3 with automorphism group 
D4 and six curves C G £3 with automorphism group Dq. They are listed in [53] 
where rational points of such curves are found. 

Genus 2 curves with degree 5 elliptic subcovers are studied in where a 
description of the space £5 is given and all its degenerate loci. The case of degree 
7 is the first case when all possible degenerate loci occur. 

We have organized the results of this paper in a Maple package which deter- 
mines if a genus 2 curve has degree n — 2, 3 elliptic subcovers. Further, all its 
elliptic subcovers are determined explicitly. We intend to implement the results 
for n = 5 and the degenerate cases for n = 7. 



7. Field of moduli versus the field of definition 

Let C be a curve defined over k. A field F C k is called a field of definition of C 
if there exists C defined over F such that C=C. The field of moduli of C is a 
subficld F C k such that for every automorphism a of fc, C is isomorphic to C 7 if 
and only if ap = id. 

The field of moduli is not necessary a field of definition. To determine the 
points p £ where the field of moduli is not a field of definition is a classical 
problem in algebraic geometry and has been the focus of many authors, Weil, 
Shimura, Belyi, Coombes-Harbater, Fried, Debes, Wolfart among others. 

Weil (1954) showed that for every algebraic curve with trivial automorphism 
group, the field of moduli is a field of definition. Shimura (1972) gave the first 
example of a family of curves such that the field of moduli is not a field of defi- 
nition. Shimura's family were a family of hyperelliptic curves. Further he adds: 

"... the above results combined together seem to indicate a rather compli- 
cated nature of the problem, which almost defies conjecture. A new viewpoint is 
certainly necessary to understand the whole situation" 

We call a point p £ H g a moduli point. The field of moduli of p is denoted by 
Fp . If there is a curve C g defined over F p such that p = [C g ] , then we call such a 
curve a rational model over the field of moduli. Consider the following problem: 

Let the moduli point p £ H g be given. Find necessary and sufficient conditions 
that the field of moduli F p is a field of definition. If p has a rational model C g 
over its field of moduli, then determine explicitly the equation of C g . 

In 1993, Mestre solved the above problem for genus two curves with auto- 
morphism group %2- In Corr. [I] is proved that for points p £ M2 such that 
|j4w£(p) I > 2 the field of moduli is a field of definition 

The proof of the above facts is constructive. In other words, a rational model 
is given. In the case when the field of moduli is not a field of definition a rational 
model is given over the minimal field of definition. 

More generally one can consider the following problem for genus g > 2 hy- 
perelliptic curves. 

8. Factoring large numbers with genus 2 curves 

In [15] an algorithm is suggested for factoring large numbers using genus two 
curves. Such algorithm chooses genus two curves with (2, 2)-split Jacobians. 

8.1. Algorithm 

HECM begin by computing k = H n<Bl n^ og( - Bl ^ log ^. We hope to encounter 
the zero of one of the underlying elliptic curves so it is important to have explicit 
morphisms between the Kummer surface and the two underlying elliptic curves. 
If the elliptic curves are in the Weierstrass form, we only need the coordinates 



Algorithm 1 HECM (stage 1) 



Require: the number n to be factor. The smoothness bound B\. 
Ensure: a factor p of n. 
1: Compute k — 1cm (1,2,..., Bi). 

2: Choose a random decomposable curve C over Z/nZ and a point P on its 

Kummer surface. 
3: Compute Q = [k]P. 

4: Map Q to the two underlying elliptic curves £j. 

5: Hope that Q = 0<£.\ mod p for one (test whether gcd (z, n) ^ 1). 
6: Else go to 2. 



(a; :: z) to test if the point is zero: just compute gcd (z, n). The morphisms between 
the Kummer surface and the underlying elliptic curves are rational over Q. 
The global morphism in HECM goes from the Kummer surface to £i x £ 2 - 
Let Q = (x, y, z, t) be a point on the Kummer surface JC a ,b.c,d corresponding 
to the hyperellipitc curve C of equation y 2 — f(x). We want to map this point 
in the Jacobian of the hyperelliptic curve. As in the above section we find the 
Mumford coordinates (u,v) of two opposite divisors ^1>~ 1 (Q) = ±D. 

Now, let P be a point on the (2, 2)-decomposable hyperelliptic curve C given 

by: 

C ■xy 2 = x(x - l)(x - X)(x - fj,)(x - v). 
We want to map P to the two elliptic curves £1,82- Let C be the curve given by 
CW = (x 2 -l) (x 2 -xl) (x 2 -xl) 

with 

q = ±VM(M - v), x 2 = , x 3 = — , x = -QKfj,(fj, - 1 . 

fi-q 1 - fjt + q 

The curves C and C arc isomorphism by the change of the coordinates. Than the 
curve C maps to the elliptic curve 

£ ■ y 2 = {x - 1) (x - xl) (x - xf) 

by the morphism (x, y) — > (x 2 , y). Let / be the map from C to £\ x £2- The push 
forward /* of / is defined: 



Jac — > Jac(£\) x Jac(£,2) 
D = E r i=i ^ rPoo — ^ Ei=i f(Pi) r/(Poo) 



where /(Poo) = (Os 1 ,Os 2 ) are the zeros of the two elliptic curves. Since the 
divisors in the Jacobian of the elliptic curve are not reduced, and it is isomorphic 
to the set of points on the curve, then the function /» can be rewritten as: 



J Jac — > Ei x £ 2 

' {D = EI =1 P« - rPoo — ► E[=i /(^i) 

We now turn to what is called stage 2. The initial point for the arithmetic 
is Q = [k]P, thus we don't have the benefit of a "good" initial point. Moreover, 
stage 2 needs the x-coordinate of many points on the elliptic curve in Weierstrass 
form [?], therefore if we use hyperelliptic curves we need to apply morphisms a 
lot and, in this case, their cost would not be negligible. For all these reasons, it 
seems that hyperelliptic curves should not be used for stage 2. Instead, we can 
apply the ECM stage 2 to the two underlying elliptic curves. 

For stage 2, ECM method needs a point on the curve y 2 — x 3 + Ax + B, but 
we have a point (xi : z\) on ny 2 z = x 3 + a,2X 2 z + a 4 xz 2 + agz 3 . First translate 
the point by putting x — > x — ei2z/3 and dividing the x-coordinate by z to get a 
point (xi, □) on the curve ny 2 = f{x) = x 3 + a 4 + a e . Then the points (x[, ±1) 
are on the curve 

Ty 2 = f(x) — x 3 + a' 4 x + a 6 
with D = /(x^. By the change of variable 

(x,y) H' (|,, ^) 

we get a point on the curve y 2 = x 3 + Ax + B with A — a' 4 /T and B = a' 6 /T 3 . 



9. A computational package for genus two curves 

Genus 2 curves are the most used of all hyperelliptic curves due to their application 
in cryptography and also best understood. The moduli space M 2 of genus 2 curves 
is a 3-dimensional variety. To understand how to describe the moduli points of 
this space we need to define the invariants of binary sextics. For details on such 
invariants and on the genus 2 curves in general the reader can check |35j , [?] , [42] . 



ii:=1444 *2 :=-1728 J2J4 ~ 3Je , ^= 486^, (37) 

J 2 <Ji ^2 

for J 2 ^ 0. In the case J 2 = we define 

J4 ■ J& J&' J10 /OD x 

ai := — , a 2 := — Ta — (38) 

•AO J 4 



to determine genus two fields with J 2 = 0, J4 7^ 0, and Jq ^ up to isomorphism. 
For a given genus 2 curve C the corresponding moduli point p = [C] is defined 

as 



' (ai,«2,*3) if ^2^0 
(ai, a 2 ) if J 2 = 0, J 4 7^ 0, J 6 7^ 



7 5 

J 6 



J 



, »/ J 2 = 0,J 4 =0,J 6 ^0 

10 



J5 

-f */ J 2 = 0,J 6 =0,J 4 ^0 
^ J io 



Notice that the definition of a.\,a 2 can be totally avoided if one uses absolute 
invariants with Jio in the denominator. However, the degree of such invariants is 
higher and therefore they are not effective computationally. 

We have written a Maple package which finds most of the common proper- 
ties and invariants of genus two curves. While this is still work in progress, we 
will describe briefly some of the functions of this package. The functions in this 
package are: 



J_2, J_4, J_6, J_10, J_48, L_3_d, a_l, a_2, i_l, i_2, i_3, 
theta_l, theta_2, theta_3, theta_4, AutGroup, CurvDeg3EllSub_J2 , 
CurveDeg3EllSub, Ell_Sub, LocusCurves,Aut_D4, LocusCurvesAut_D4_J2, 
LocusCurvesAut_D6, LocusCurvesAut_V4, Rational_Model , Kummer. 

Next, we will give some examples on how some of these functions work. 



9.1. Automorphism groups 



A list of groups that can occur as automorphism groups of hyperelliptic curves 
is given in [?] among many other references. The function in the package that 
computes the automorphism group is given by AutGroup{). The output is the 
automorphism group. Since there is always confusion on the terminology when 
describing certain groups we also display the GAP identity of the group from the 
SmallGroupLibrary. 

For a fixed group G one can compute the locus of genus g hyperelliptic curves 
with automorphism group G. For genus 2 this loci is well described as subvarieties 
of M 2 . 

Example 1. Let y 2 = f(x) be a genus 2 curve where / := x 5 + 2x 3 — x. Then the 
function AutGroup(f,x) displays: 



> AutGroup(f,x); 

[I>4, (8, 3)] 

Example 2. Let y 2 — f(x) be a genus 2 curve where / := x e + 2x 3 — x. Then the 
function AutGroup(f,x) displays: 



> AutGroup(f,x); 



[^4,(4,2)] 



We also have implemented the functions: LocusCurvesAut_V_4() , 

LocusCurvesAut_D_4 , LocusCurvesAut_D4_J2() , LocusCurvesAut_D_6() , 

which gives equations for the locus of curves with automorphism group D4 or Dq. 

9.2. Genus 2 curves with split Jacobians 

A genus 2 curve which has a degree n maximal map to an elliptic curve is said to 
have (n,n)- split Jacobian; see jM] for details. Genus 2 curves with split Jacobian 
are interesting in number theory, cryptography, and coding theory. We implement 
an algorithm which checks if a curve has (3, 3), and (5, 5)-split Jacobian. The case 
of (2, 2)-split Jacobian corresponds to genus 2 curves with extra involutions and 
therefore can be determined by the function LocusCurvesAut_V_4(). 

The function which determines if a genus 2 curve has (3, 3)-split Jacobian is 
CurvDeg3EllSub() if the curve has J 2 ^ and CurvDeg3EllSub_J_2 () other- 
wise; see [§]. The input of CurvDeg3EllSub() is the triple (11,12,13) or the pair 
(a.\, a.2) for CurvDeg3EllSub_J_2 () . If the output is 0, in both cases, this means 
that the corresponding curve to this moduli point has (3, 3)-split Jacobian. Below 
we illustrate with examples in each case. 

Example 3. Let y 2 = f(x) be a genus 2 curve where / := 4x e + 9x 5 + 8x 4 + 
10x 3 + hx 2 + 3x + 1. Then, 

> i_l:=i_l(f ,x) ; i_2:=i_2(f ,x) ; i_3:=i_3(f ,x) ; 

. _ 78741 . _ 53510733 . 38435553 
H '~ 100 ' 12 '~ 2000 ' 13 '~ 51200000 

> CurvDeg3EllSub(ii, 12, 13); 



This means that the above curve has a (3, 3)-split Jacobian. 

Example 4. Let y 2 — f(x) be a genus 2 curve where / := 4x G + (52V6— 119)x 5 + 
(39\/6 - 24)x 4 + (26\/6 - 54)a; 3 + (13V6 - 27)x 2 + 3.x + 1. Then, 

> a_l :=a_l(f ,x) ; a_2:=a_2(f ,x) ; 



_ 1316599234443 r- 6310855638567 
Ql '~ 270840023 + 541680046 ' 

-96672521239976 r- 1467373119039023 
fl2 :_ 1183208072032328121 + 7099248432193968726 

> CurvDeg3EllSub_J_2(ai, a 2 ) 





This means that the curve has J 2 = and (3, 3)-split Jacobian. 



9.3. Rational model of genus 2 curve 



For details on the rational model over its field of moduli see 53 . The ra- 
tional model of C (if such model exists) is determined by the function 
Rational_Model () . 

Example 5. Let y 2 — f{x) be a genus 2 curve where / := x 5 + \[2x 3 + x. Then, 
> Rational_Model(f ,x); 



x 5 + x 3 + -x 

Example 6. Let y 2 — f(x) be a genus 2 curve where / := 5x 6 + x 4 + \/2x + 1. 
Then, 

> Rational_Model(f ,x); 

- 365544026018739971082698131028050365165449396926201478:r 6 

- 606501618836700589954579317910699990585971018672445125:r 5 

- 369842283192872727990502041940062429271727924754392250a: 4 

- 32387676975314893414920003149434215247663074288356250i 3 
+ 7416849007919832898704 7652288420271784298171220937500^ 2 
+ 38274648493772601723357350829541971828965732551171875^ 
+ 6501732463119213927460859571034949543087123367187500 

Notice that our algorithm doesn't always find the minimal rational model of 
the curve. An efficient way to do this has yet to be determined. 

9.4- A different set of invariants 

As explained in Section 2, invariants i 1,12,^3 were defined that way for compu- 
tational benefits. However, they make the results involve many subcases and are 
inconvinient at times. In the second version the the gemis2 package we intend to 
convert all the results to the ti,t 2 , £3 invariants 

75 t5 t5 

i — _2_ + — z±_ f — zJL 

H T , f-2 — j2 ) L 3 — t3 • 
J 10 ^10 J 10 

The other improvement of version two is that when the moduli point p is 
given the equation of the curve is given as the minimal equation over the minimal 
field of definition. 
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